Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for driving and enforcing security outcomes across a global multi-cloud environment spanning AWS, Microsoft Azure, and Microsoft m365.

This role focuses on defining control requirements, identifying risk, and ensuring remediation of cloud security issues in partnership with Infrastructure and Application teams, who perform hands-on implementation.

This position offers flexibility for a hybrid work schedule, combining in-office and virtual work, and must be based in Dallas or Houston, TX.

Key Responsibilities:

Cloud Security Governance & Control Oversigh

Perform Cloud Security Posture management (CSPM)

Utilize Palo Alto Prisma Cloud and Qualys TotalCloud to identify misconfigurations, vulnerabilities, and deviations from baseline

Define and initiate remediation requirements for Infrastructure and Application teams

Track and drive remediation efforts to closure

Partner with Security Architecture to translate cloud security standards into actionable control requirements

Ensure adherence to approved cloud security baselines and standards

Support exception management and risk acceptance processes with Cybersecurity Architecture and Cybersecurity GRC

Develop and deliver reporting on cloud security posture and risk to Cybersecurity and IT leadership

Cloud Visibility & Risk Management

Own visibility into cloud security posture across AWS and Azure

Define risk metrics, prioritization models, and reporting standards

Improve asset visibility and configuration awareness across cloud environments

Partnership & Enablement

Partner with Infrastructure and Application teams to ensure secure implementation of controls

Provide guidance on secure cloud practices aligned with enterprise standards (NIST, CIS)

Collaborate with stakeholders to prioritize and address security risks

Cloud Logging & Integration

Support integration of cloud telemetry into enterprise logging and monitoring platforms

Enhance visibility into cloud activity and control effectiveness

Proofpoint / Email Security (Secondary Responsibility)

Provide backup support for Proofpoint Email Gateway

Assist with policy updates, tuning, and troubleshooting mail flow issues

Ensure continuity of secure email operations

Continuous Improvement

Drive continuous improvement of cloud security processes, tooling, and reporting

Stay current with evolving cloud threats and technologies

Minimum Requirements:

Bachelor’s degree (BA/BS) and at least 6 years of information technology / cybersecurity experience with cloud security focus or demonstrated equivalency of experience and/or education

Experience with AWS and Microsoft Azure environments

Experience with CSPM/CNAPP tools (Prisma Cloud, Qualys TotalCloud, CrowdStrike Cloud Security, or similar)

Strong understanding of cloud security concepts, IAM, and network security

Experience managing and driving remediation of security issues

Preferred Qualifications:

Strong communication and stakeholder management skills

Experience with Proofpoint Email Protection or similar platforms

Experience with SIEM/logging integrations

Familiarity with Infrastructure-as-Code concepts

Understanding of NIST, CIS, ISO 27001

Cloud security certifications (AWS, Azure) highly preferred

Experience in large enterprise environments

Relocation assistance is not available for this position

Sponsorship for US work authorization is not available for this position, now or in the future

At AECOM, we are committed to maintaining a secure and trustworthy recruitment process and take any fraudulent hiring activity seriously. To support this commitment, all newly hired employees are required to attend an in-person Day 1 onboarding at an AECOM office location as a condition of employment.

About AECOM

AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, flexible work options , well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.

AECOM is the global infrastructure leader, committed to delivering a better world. As a trusted professional services firm powered by deep technical abilities, we solve our clients’ complex challenges in water, environment, energy, transportation and buildings. Our teams partner with public- and private-sector clients to create innovative, sustainable and resilient solutions throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. AECOM is a Fortune 500 firm that had revenue of $16.1 billion in fiscal year 2025. Learn more at aecom.com.

What makes AECOM a great place to work

You will be part of a global team that champions your growth and caree…